$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json) Hash identifier: T0MWBBafdl2o1yas8ehp0bXISlmepXgenjvazGWoc5U= Subject key identifier: F8:C0:04:B7:C0:11:FB:FF:23:9E:B3:E9:82:72:5C:D2:0A:89:44:97 Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft Manifest number: 15 Signing time: Sun 19 Oct 2025 11:28:37 +0000 Manifest this update: Sun 19 Oct 2025 11:28:37 +0000 Manifest next update: Sun 26 Oct 2025 11:28:37 +0000 Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: sj2DJSKHgFW6s/YkjlgU2pwvVqYpV+jEesucVw8C9tY=) 2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: 5FblCrC5z4khMAdynBGpl1OeK8F3ELtDOlzocALKnPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Oct 19 11:28:37 2025 GMT Not After : Oct 26 11:28:37 2025 GMT Subject: CN=68f4cb65-0c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e2:53:5a:25:6d:aa:05:2d:de:bf:3c:98:f9: d4:44:9a:cf:10:39:b6:b4:14:b8:40:12:08:8b:16: 1c:ea:8a:10:d9:e5:f5:f4:79:70:3f:92:fc:d0:be: a4:64:3a:ac:6b:f1:ea:c8:13:75:06:b9:ac:f4:a0: 55:97:38:ed:e5:46:3b:62:9e:56:26:65:ac:8e:8f: 2a:1e:91:1d:65:a0:50:bc:2b:f6:5f:b4:ab:82:28: 99:1b:eb:ff:9f:49:d4:60:ce:ed:11:22:e6:47:0d: 7d:53:d9:f8:ae:ac:4e:dc:fc:1a:dd:c9:e2:d8:f9: 50:a6:39:b2:7d:7a:53:79:90:a4:e1:94:9f:a8:c0: c4:4f:c9:89:7b:69:ab:00:38:c1:2b:36:66:7a:df: 0c:e9:c0:fc:2c:e3:e7:a5:95:b1:f0:e1:a2:88:52: 5c:3b:88:85:30:11:72:7b:92:ed:b5:8c:77:c9:df: 3d:9d:bf:58:34:8e:9d:5c:dd:3f:51:11:2b:7b:79: 67:b9:99:9f:7a:5c:af:0e:cf:55:af:ec:79:f1:13: 8a:48:c8:36:89:b8:a4:87:87:de:fd:6d:c4:8b:9a: a1:65:8c:74:b9:90:23:c9:42:83:c2:5a:a4:a4:0f: ad:56:c3:7d:15:4e:ce:ea:dd:6c:1d:69:11:6f:b5: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C0:04:B7:C0:11:FB:FF:23:9E:B3:E9:82:72:5C:D2:0A:89:44:97 X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:98:df:7b:e1:88:b7:36:80:99:42:e4:80:02:36:87:c0:16: 66:ce:2a:ff:ae:2c:70:20:33:50:91:57:91:20:2d:75:1c:36: 3e:72:f4:9d:a9:f2:92:42:e4:ec:44:d5:25:75:01:cb:e1:b2: de:06:c7:c5:a9:c2:15:43:b7:66:78:2b:1e:b3:4f:75:ed:c2: 12:74:27:f4:fd:42:72:ad:75:30:3c:22:fe:22:6b:c8:c0:f5: a2:a3:c9:7e:87:e3:69:5c:12:a0:26:da:d4:f0:54:0a:ce:ed: 5f:84:e5:97:2f:fd:c4:e5:87:50:01:56:9a:96:c0:7f:a6:4b: 72:35:15:16:65:d5:67:2c:01:64:b6:e4:bf:da:83:ca:e3:ab: f6:20:d9:0d:e4:44:3a:1c:49:05:bb:e0:e8:ac:3b:08:0c:9e: e2:b2:26:40:d0:45:97:1f:aa:13:74:3f:ca:1b:3a:ba:4c:b8: d8:03:bc:69:6a:43:62:ee:5f:e7:4e:b3:a6:86:5e:c5:52:a2: aa:08:72:35:d2:44:cd:f1:1e:67:7d:3c:b5:6a:63:cf:7d:ae: 3c:60:1b:a9:0e:07:68:a4:db:87:1a:12:dc:7b:54:2f:10:75: 9c:d0:83:c4:ee:1d:f4:7b:50:32:db:56:ee:c1:71:18:e0:4e: 3d:0b:ca:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNTEwMTkxMTI4MzdaFw0yNTEwMjYxMTI4MzdaMBgxFjAUBgNV BAMTDTY4ZjRjYjY1LTBjOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh4lNaJW2qBS3evzyY+dREms8QOba0FLhAEgiLFhzqihDZ5fX0eXA/kvzQvqRk Oqxr8erIE3UGuaz0oFWXOO3lRjtinlYmZayOjyoekR1loFC8K/ZftKuCKJkb6/+f SdRgzu0RIuZHDX1T2fiurE7c/BrdyeLY+VCmObJ9elN5kKThlJ+owMRPyYl7aasA OMErNmZ63wzpwPws4+ellbHw4aKIUlw7iIUwEXJ7ku21jHfJ3z2dv1g0jp1c3T9R ESt7eWe5mZ96XK8Oz1Wv7HnxE4pIyDaJuKSHh979bcSLmqFljHS5kCPJQoPCWqSk D61Ww30VTs7q3WwdaRFvtSIBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+MAEt8AR +/8jnrPpgnJc0gqJRJcwHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzcyNjBGQzBDOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFV QkNaUkNCN0hYQW1aMzhKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJaY33vhiLc2gJlC5IACNofAFmbOKv+uLHAgM1CRV5EgLXUcNj5y9J2p 8pJC5OxE1SV1Acvhst4Gx8WpwhVDt2Z4Kx6zT3XtwhJ0J/T9QnKtdTA8Iv4ia8jA 9aKjyX6H42lcEqAm2tTwVArO7V+E5Zcv/cTlh1ABVpqWwH+mS3I1FRZl1WcsAWS2 5L/ag8rjq/Yg2Q3kRDocSQW74OisOwgMnuKyJkDQRZcfqhN0P8obOrpMuNgDvGlq Q2LuX+dOs6aGXsVSoqoIcjXSRM3xHmd9PLVqY899rjxgG6kOB2ik24caEtx7VC8Q dZzQg8TuHfR7UDLbVu7BcRjgTj0LynM= -----END CERTIFICATE-----Generated at Tue Oct 21 03:25:28 2025 by rpki-client